Privacy
notice.

This English text is a translation provided for convenience. In case of discrepancy the Italian version prevails.

Tecnel System S.p.A. (VAT no. IT05867490152), in the person of its legal representative pro tempore, with registered office at Via Brunico 15, 20126 Milan (MI), Italy, as data controller, informs you that, in compliance with Italian Legislative Decree 196/2003 and European Regulation 679/2016 (GDPR) governing the protection of personal data and its free movement, your personal data will be processed in accordance with that legislation, following the principles of fairness, lawfulness, proportionality of interests and transparency, as well as the protection of your privacy and your rights, for the purposes, in the manner and for the terms set out below.

Purposes, methods and legal bases of the processing

This privacy policy applies exclusively to the online activities of this site and is valid for its visitors and users. It does not apply to information collected through channels other than this website. The purpose of the privacy policy is to provide the fullest transparency about the information the site collects and how it uses it.

Your personal data will be processed exclusively for purposes strictly connected, instrumental and necessary to the fulfilment of the obligations inherent in your relationship with our company.

Personal data is processed by means of the operations set out in Legislative Decree 196/2003 and in art. 4 no. 2) GDPR, namely: collection, recording, organisation, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, erasure and destruction.

Personal data is processed on IT systems by the controller, by the processor or processors and by authorised persons, observing every precautionary measure that guarantees its security and confidentiality. The data is not subject to profiling or to automated decision-making processes.

The data is kept by the data controller and by the processors it has designated. In any event, your personal data will be kept and processed within the borders of the European Economic Area and will be transferred outside those borders only with your explicit consent.

Where you provide comments or personal data to request information or specific services (for example, requests for commercial and technical information, downloads of catalogues and technical documentation, subscription to our newsletter), that data is deemed to be voluntarily supplied by the user at the time the service is requested. By entering a comment or other information the user expressly accepts this privacy policy.

This site may process some personal data on the basis of the legitimate interests of the data controller, as provided for in Legislative Decree 196/2003 and in art. 6 of European Regulation 679/2016.

The data received is used exclusively to provide the service.

Information that users of the site choose to make public through the services and tools made available to them is supplied by the user knowingly and voluntarily, releasing this site from any liability for breaches of the law. It is the user's responsibility to verify that they have permission to enter personal data of third parties or content protected by national and international rules.

The data collected by the site during its operation is used exclusively for the purposes set out above and kept for the time strictly necessary to carry out those activities. In any event, the data recorded by the site will never be supplied to third parties, for any reason, unless there is a legitimate request from the judicial authority and only in the cases provided for by law.

Nature of the data collection and consequences of a failure to provide data

Like all websites, this site uses log files in which information collected automatically during user visits is stored. The information collected may be the following:

• internet protocol (IP) address;
• browser type and parameters of the device used to connect to the site;
• name of the internet service provider (ISP);
• date and time of the visit;
• the visitor's referring and exit web page;
• possibly the number of clicks.

This information is processed in automated form and collected exclusively in aggregate form in order to verify the correct functioning of the site, for security reasons and for the legitimate interests of the controller provided for by the legislation in force.

For security purposes (anti-spam filters, firewall, virus detection), the data recorded automatically may also include personal data such as the IP address, which may be used, in accordance with the applicable law, to block attempts to damage the site or to harm other users, or otherwise harmful or criminal activity. That data is never used to identify or profile the user, but only to protect the site and its users and the legitimate interests of the controller.

By using or consulting this site, visitors and users explicitly approve this privacy policy and consent to the processing of their personal data in relation to the methods and purposes described here, including any disclosure to third parties if necessary to provide a service. Providing the data, and therefore consenting to its collection and processing, is optional; however, refusing consent may make it impossible to provide some services and the browsing experience on the site may be impaired.

Consent to the use of your data for marketing or advertising purposes (sending e-mails or communications with advertising offers) is optional and requires, in addition to providing your personal data, an explicit request through an opt-in function on this website.

Processing and storage

The controller, the processors and the persons authorised to process the data will process personal data for the time necessary to fulfil the purposes set out above and, in any event, for no more than 10 years from the end of the relationship where provided for or made necessary by the legislation in force.

As regards data you provide in order to receive commercial information, newsletters and periodic notices, that data will be processed until you request to unsubscribe.

Scope of communication and disclosure

For the purposes of performing the contract or the services you have requested, and for the purposes set out above, your personal data may be communicated:

• to all natural and legal persons (for example legal, administrative and tax consultancy firms, auditing companies, couriers and shipping agents, data processing centres, IT consultants, suppliers) where the communication is necessary for the purposes described above;
• to banking institutions for the management of collections and payments;
• to factoring or debt collection companies;
• to our collaborators and employees specifically appointed and within the scope of their duties;
• to SMTP providers for sending newsletters.

Rights of the data subject

By calling +39 02 2578803 or writing to info@tecnelsystem.it you may at any time exercise your rights towards the data controller under European Regulation 679/2016, which we reproduce here for your convenience.

The data subject has the right to obtain confirmation of the existence or otherwise of processing of personal data concerning them, even if not yet recorded, and its communication in intelligible form.

The data subject has the right to be informed of:

• the origin of the personal data (with particular regard to cases where it is not collected from the data subject and, where data is transferred to a third country, the existence of adequate safeguards under art. 46 of the Regulation);
• the purposes and methods of the processing;
• the logic applied where processing is carried out with the aid of electronic instruments;
• the identifying details of the controller, the processors and the designated representative;
• the persons or categories of persons to whom the personal data may be communicated or who may become aware of it as designated representative in the territory of the State, as processors or as authorised persons;
• the categories of personal data being processed;
• the data retention period or the criteria used to determine it;
• the existence of automated decision-making processes, with particular regard to profiling, and the logic applied;
• the right to obtain a copy of the personal data undergoing processing.

The data subject also has the right to obtain:

• the updating, rectification or, where of interest, the integration of the data;
• the erasure, anonymisation or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which it was collected or subsequently processed;
• confirmation that the operations referred to in the two previous points have been notified, including as regards their content, to those to whom the data was communicated or disclosed, except where this proves impossible or involves a manifestly disproportionate effort compared with the right protected;
• the erasure of the data from our archives under art. 17 pt. 1 letters a) to f) of the Regulation (the right to be forgotten), by contacting +39 02 2578803, info@tecnelsystem.it;
• the restriction of processing under art. 18 pt. 1 letters a) to d) of the Regulation.

The data subject has the right to object, in whole or in part, to the processing of the data:

• on legitimate grounds connected with their particular situation, even where the processing is relevant to the purpose of the collection;
• to the processing of personal data concerning them for the purpose of sending advertising material or direct selling, or for carrying out market research or commercial communication;
• to the processing of data under art. 6 pt. 1 letters e) and f), including profiling on the basis of those provisions.

Where the processing is based on the consent of the data subject, they have the right to withdraw that consent at any time by making an explicit request to the following contacts: +39 02 2578803, info@tecnelsystem.it.

The data subject also has the right to lodge a complaint with the Supervisory Authority.

The above rights may be exercised by a request addressed to the controller or the processor, sent by telephone, by email to the addresses indicated above or by registered letter with return receipt.